Conversation exchange dynamics for real-time network monitoring and anomaly detection

Proceedings - Second IEEE Information Assurance Workshop

Volumn , Issue , 2004, Pages 59-70

  Zachary, John ^a   McEachen, John ^b   Ettlich, Dan ^b  

^a The Department of Mechanical Engineering   (United States)

^b Naval Postgraduate School   (United States)

Author keywords

Denial of service; Network anomaly detection; Network assurance; Real time network monitoring; Visualization

Indexed keywords

DENIAL OF SERVICE; NETWORK ANOMALY DETECTION; NETWORK ASSURANCE; REAL TIME NETWORK MONITORING;

COMPUTER CRIME; MONITORING; REAL TIME SYSTEMS; SECURITY OF DATA; TELECOMMUNICATION SERVICES; TELECOMMUNICATION TRAFFIC; TOPOLOGY;

TELECOMMUNICATION NETWORKS;

EID: 4544285697     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/IWIA.2004.1288038     Document Type: Conference Paper

References (20)

1. R. Basu, R. Cuningham, S. Webster, and R. Lippmann. Detecting low-profile probes and novel denial of service attacks. In Proceedings of the 2001 IEEE Workshop on Information Assurance and Security, United States Military Academy, West Point, NY, June 2001.
2. L. Boltzmann. Lectures on Gas Theory. Berkeley Press, 1964.
3. M. Burgess. Thermal, nonequilibrium phase space for networked computers. Physical Review E, 62(2), August 2000.
4. S. Donald, R. McMillen, D. Ford, and J. McEachen. Therminator 2: A thermodynamics-based method for real-time patternless intrusion detection. In Proceedings of the IEEE Military Communications Conference (MILCOM), pages 1498 -1502, Los Angeles, CA, October 2002.
5. P. Ehrenfest and T. Ehrenfest. The Conceptual Foundations of the Statistical Approach in Mechanics. Cornell University Press, 1959.
6. S. Evans and B. Barnett. Network security through conservation of complexity. In Proceedings of the IEEE Mili tary Communications Conference (MILCOM), pages 1133-1138, Los Angeles, CA, October 2002.
7. N. Gershenfeld. The Nature of Mathematical Modeling. Cambridge Press, 1999.
8. M. Handley, V. Paxson, and C. Kreibich. Network intrusion detection: Evasion, traffic normalization, and end-to-end protocol semantics. In Proceedings of the USENIX Security Symposium, 2001.
9. J. Hughes, T. Aura, and M. Bishop. Using conservation of flow as a security mechanism in network protocols. In Proceedings of the 2000 IEEE Symposium on Security and Privacy, May 2000.
10. C. Krugel, T. Toth, and E. Kirda. Service specific anomaly detection for network intrusion detection. In Proceedings of Symposium on Applied Computing (SAC), Madrid, Spain, March 2002.
11. A. Kuzmanovic and E. Knightly. Low-rate tcp-targeted denial of service attacks. In Proceedings of the 2003 ACM Conference on Applications, Technologies, Architectures, and Protocols for Computer Communications (SIGCOMM), pages 75-86, Karlsruhe, Germany, 2003.
12. D. Moore, V. Paxson, S. Savage, C. Shannon, S. Staniford, and N. Weaver. The spread of the sapphire/slammer worm. Technical report, CAIDA Technical Report, 2003.
13. nd ACM Internet Measurement Workshop, 2002.
14. D. Moore, C. Shannon, G. Voelker, and S. Savage. Internet quarantine: Requirements for containing self-propagating code. In Proceedings of the IEEE INFOCOM, San Francisco, CA, March 2003.
15. V. Paxson. Bro: A system for detecting network intruders in real-time. Computer Networks, 31(23-24), December 1999.
16. T. Ptacek and T. Newsham. Insertion, evasion, and denial of service: Eluding network intrusion detection. Technical report, Secure Networks, Inc., January 1998.
17. A. Rubin. White-Hat Security Arsenal: Tackling the Threats. Addison-Wesley, 2001.
18. U. Shankar and V. Paxson. Active mapping: Resisting nids evasion without altering traffic. In Proceedings of the IEEE Symposium on Security and Privacy, Oakland, CA, May 2003.
19. R. Sommer and V. Paxson. Enhancing byte-level network intrusion detection signatures with context. In Proceedings of the ACM Conference on Computer and Communications Security (CCS'03), Washington, D.C., November 2003.
20. L. Takács. Combinatorial Methods in the Theory of Stochastic Processes. John Wiley and Sons, 1967.